30fc4080ab3f71b6c1b6498cf5dea907_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30fc4080ab3f71b6c1b6498cf5dea907_JaffaCakes118
Size

1.5MB
MD5

30fc4080ab3f71b6c1b6498cf5dea907
SHA1

bdf409e8de110c8ef9109dd6ec4b884f692f2e80
SHA256

c358ec7b4951f213437dd55a7b7d80219a2e432951963e7f17112af7a960415e
SHA512

ace0c483e13100136bf6987bda13b9b71da7847e2080b04f53b9cfd9b889f3ece4af2d4761dd801edac2936aac440992924a7e859af1d8cf4cefea0d78282cbf
SSDEEP

12288:SJNDbG0B6acriJx/3MkROgCBQupvKHWs0J1:K6jrmFA/QbA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30fc4080ab3f71b6c1b6498cf5dea907_JaffaCakes118

Files

30fc4080ab3f71b6c1b6498cf5dea907_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\raquel\Pictures\Documents\Visual Studio 2008\Projects\Edited Spammer\Edited Spammer\obj\Release\New Gamers Zone Edited Spam.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ